this is json { "@timestamp" => 2022-11-19T06:19:08.249Z, "database" => "12", "data": { "a": 1, "b": 2 } } how resolve to { "@timestamp" => 2022-11-19T06:19:08.249Z, "database" => "12", "a": 1, "b": 2 }

Logstash split the child json to the parent layer

Badger November 19, 2022, 3:32pm 2

You could use something like the last ruby filter in this post.

Topic		Replies	Views
One log object is divided unexpectedly in LogStash Logstash	1	1016	July 6, 2017
Logstash and JSON array split Logstash	5	360	October 16, 2020
Need help parsing json array Logstash	4	337	June 26, 2018
Logstash how to parse and split nested json file Logstash	10	1992	June 20, 2022
Logstash Nested JSON Parsing and Transforming data Logstash	3	257	December 14, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash split the child json to the parent layer

Related topics